Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the checkNotificationType() function. Attackers can repeatedly call the wpdiscuz-ajax.php endpoint with arbitrary postId and comment_id parameters to flood subscribers with notifications, as the handler lacks nonce verification, authentication checks, and rate limiting.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-08 | 1 | PoC1 |
| 2026-02-16 | 3 | Active Exploitation2General1 |
| 2026-03-13 | 1 | Disclosure1 |
| 2026-03-14 | 1 | Disclosure1 |
OpenCode RCE POC – Explain (CVE-2026-22182) For more join my BugBounty telegram channel 👉🏼 http://t.me/ShellSec ㅤ https://t.co/uIRzCUsyJQ
Post summary
The post references a proof‑of‑concept for CVE‑2026‑22182, linking to additional information, but does not mention active exploitation, patches, or detailed technical data.
CVE-2026-22182: OpenCode Unauth RCE. We detected and blocked exploit attempts in our customer environments starting 2/8/2026. Emerging threats mitigation is just one of the many benefits of counter-reconnaissance: Cyber Deception Reimagined. https://t.co/yDwEtUxcZO
Post summary
The tweet reports that exploit attempts for CVE-2026-22182, an unauthenticated RCE, were detected and blocked in customer environments, confirming active exploitation in the wild.
Top 5 Trending CVEs: 1 - CVE-2026-20841 2 - CVE-2025-55177 3 - CVE-2026-1731 4 - CVE-2025-9961 5 - CVE-2026-22182 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post lists five trending CVEs but provides no further technical, exploit, or mitigation details.
CVE Alert: CVE-2026-22182 - gVectors - wpDiscuz - https://www.redpacketsecurity.com/cve-alert-cve-2026-22182-gvectors-wpdiscuz/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-22182 #gvectors #wpdiscuz
Post summary
A CVE alert for CVE‑2026‑22182 affecting wpDiscuz’s gVectors component is shared with a link to a security blog, but no further exploitation details or remediation guidance are offered.
CVE-2026-22182 wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the c… https://www.cve.org/CVERecord?id=CVE-2026-22182
Post summary
The text announces a DoS vulnerability in wpDiscuz versions before 7.6.47 that enables anonymous users to generate mass notification emails.
@Divert_Security CVE-2026-22182 unauth RCE is nasty. good thing you caught it early with deception tech. exploit attempts starting 2/8 means this was actively being weaponized. patch immediately if you're running opencode
Post summary
CVE‑2026‑22182 is an unauthenticated RCE that is actively being weaponized with exploit attempts noted from 2/8, and the advisory urges immediate patching for users of OpenCode.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gvectors | wpdiscuz | - | wordpress | - |